Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Marcella Hastings

Researcher fromUniversity of Pennsylvania
#23425of 60,400
12.8Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2016-7670
2016-12-23
7.5
CVE-2016-9154
Siemens
Desigo Px
The issue is related to the use of a pseudo random number generator with insufficient entropy to generate certificates for HTTPS. This could potentially allow remote attackers to reconstruct the corresponding private key.
PT-2016-7031
2016-08-10
5.3
CVE-2016-6670
Huawei
Huawei S12700
The issue concerns the generation of self-signed certificates in certain Huawei devices. These devices use random numbers with insufficient entropy, making it easier for remote attackers to discover private keys by leveraging knowledge of a certificate. This could potentially allow an attacker to compromise the certificates, as different devices' certificates may use the same random number.